correct but i want to make sure that the cert itself is not valid and a fake cert